Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/u9Brp15kp9-0ral0uY0WO7dJKws.roa
File: u9Brp15kp9-0ral0uY0WO7dJKws.roa (raw, json)
Hash identifier: pIgRkUTjW4c/nnbl+aC4N76TO0OtUvK6lOn1hRVWvp8=
Subject key identifier: BB:D0:6B:A7:5E:64:A7:DF:B4:AD:A9:74:B9:8D:16:3B:B7:49:2B:0B
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01851171F60FFD879C891C442BC747DA8A05
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/u9Brp15kp9-0ral0uY0WO7dJKws.roa
Signing time: Wed 14 Dec 2022 16:22:39 +0000
ROA not before: Wed 14 Dec 2022 16:22:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213035
IP address blocks: 195.133.75.0/24 maxlen: 24
212.193.31.0/24 maxlen: 24
193.124.227.0/24 maxlen: 24
212.193.28.0/24 maxlen: 24
193.124.41.0/24 maxlen: 24
195.133.14.0/24 maxlen: 24
195.133.13.0/24 maxlen: 24
212.192.4.0/24 maxlen: 24
195.133.31.0/24 maxlen: 24
195.133.37.0/24 maxlen: 24
192.124.182.0/24 maxlen: 24
212.192.240.0/24 maxlen: 24
194.85.251.0/24 maxlen: 24
194.85.249.0/24 maxlen: 24
195.133.39.0/24 maxlen: 24
192.124.188.0/24 maxlen: 24
195.133.40.0/22 maxlen: 24
195.58.59.0/24 maxlen: 24
194.58.60.0/24 maxlen: 24
194.87.187.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:11:71:f6:0f:fd:87:9c:89:1c:44:2b:c7:47:da:8a:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Dec 14 16:22:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bbd06ba75e64a7dfb4ada974b98d163bb7492b0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:61:55:e3:1b:9b:da:e1:1f:a9:bc:0f:49:ec:
74:34:d4:83:51:8b:a1:f3:60:0f:0b:05:39:64:4d:
04:00:9f:13:bc:1f:6d:b3:e8:2b:4a:66:51:b5:47:
0e:4a:ad:68:70:00:d8:1a:ea:4b:49:44:43:78:e9:
0e:a3:74:06:90:1a:30:41:5d:ec:ab:d1:74:b7:81:
e3:1a:c6:49:44:03:27:69:57:6f:15:0a:8f:07:8b:
41:17:bf:27:57:e1:33:7a:71:cd:7c:d3:58:6e:95:
af:4d:b3:89:1d:8d:77:78:1f:9a:2e:0c:bb:67:a1:
e0:1e:ec:75:29:3c:1c:41:9c:7b:93:3b:0d:ee:68:
aa:b8:f4:0b:29:f1:8b:dc:43:45:97:b7:1c:3f:28:
7d:68:06:11:9f:84:cd:2f:a8:a3:2d:1a:12:b8:0a:
bd:8d:2d:6d:15:ac:0f:e0:d8:a8:0c:99:47:9a:fd:
92:3d:f1:a2:a2:64:83:c1:62:51:83:c9:b7:f9:89:
d7:68:c2:93:7c:e8:9c:8c:88:67:b5:f0:e7:e7:f2:
4a:c6:2f:61:2b:5b:78:1f:fc:ea:20:22:77:82:67:
42:58:e5:7d:d1:1f:c3:46:d9:1f:d9:e2:42:81:49:
2b:ac:7d:a7:72:f6:50:6b:fb:27:dd:5c:0c:5e:f4:
db:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:D0:6B:A7:5E:64:A7:DF:B4:AD:A9:74:B9:8D:16:3B:B7:49:2B:0B
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/u9Brp15kp9-0ral0uY0WO7dJKws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.182.0/24
192.124.188.0/24
193.124.41.0/24
193.124.227.0/24
194.58.60.0/24
194.85.249.0/24
194.85.251.0/24
194.87.187.0/24
195.58.59.0/24
195.133.13.0-195.133.14.255
195.133.31.0/24
195.133.37.0/24
195.133.39.0-195.133.43.255
195.133.75.0/24
212.192.4.0/24
212.192.240.0/24
212.193.28.0/24
212.193.31.0/24
Signature Algorithm: sha256WithRSAEncryption
92:38:58:cb:cc:8c:36:f6:d7:bf:d1:4b:b0:7f:47:c9:51:2d:
bb:7e:8a:58:89:8a:81:dc:19:b2:8d:43:be:0e:f8:24:00:5e:
c5:b0:bb:33:3c:fe:aa:bd:d7:0d:d1:ac:df:5f:58:55:3b:0b:
2f:76:02:6d:e5:79:0b:92:3c:b5:58:4e:ee:31:54:7d:91:b1:
47:c1:2e:2f:be:e1:68:b1:ea:65:2e:f6:6a:97:80:be:94:cb:
4a:b3:bf:9a:1b:cd:e5:aa:01:2a:86:f0:d0:a2:f1:b6:4c:92:
5d:81:a3:f1:e5:4a:1e:e4:3d:7b:66:12:f3:2c:c5:79:39:0d:
bc:94:17:b5:9f:12:67:23:40:14:c7:3b:7b:f6:af:ac:b4:d5:
13:61:b1:ec:d3:99:36:cb:c0:a3:46:04:19:3a:7c:46:f6:40:
70:79:48:bf:34:bc:d8:dc:06:66:20:ea:d4:b5:79:15:ec:3e:
9e:17:d9:23:99:52:5e:f4:83:f6:19:fc:94:ff:90:64:16:94:
17:3e:01:44:52:09:a9:c5:be:7d:65:49:bc:79:21:ae:6c:a1:
c2:6c:78:b2:cd:f0:14:1d:b3:46:16:8c:34:a2:25:82:b2:75:
29:b3:11:9c:30:8a:f7:5d:24:d9:06:d5:eb:37:74:dd:21:0e:
83:72:7c:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:13 2023 by rpki-client on console-fra.rpki-client.org